> cat /var/log/audit/audit.log
type=CRED_DISP msg=audit(1595368388.304:44195): pid=80479 uid=0 auid=1002 ses=4705 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1595368388.305:44196): pid=80479 uid=0 auid=1002 ses=4705 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SYSCALL msg=audit(1595368416.744:44197): arch=c000003e syscall=62 success=yes exit=0 a0=13a43 a1=3 a2=64 a3=2e8 items=0 ppid=1 pid=19057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="php-fpm" exe="/opt/cpanel/ea-php73/root/usr/sbin/php-fpm" key="audit_kill"
type=OBJ_PID msg=audit(1595368416.744:44197): opid=80451 oauid=-1 ouid=1002 oses=-1 ocomm="php-fpm"
type=PROCTITLE msg=audit(1595368416.744:44197): proctitle=7068702D66706D3A206D61737465722070726F6365737320282F6F70742F6370616E656C2F65612D70687037332F726F6F742F6574632F7068702D66706D2E636F6E6629
type=USER_ACCT msg=audit(1595368441.352:44198): pid=80499 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1595368441.352:44199): pid=80499 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1595368441.352:44200): pid=80499 uid=0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=4706 res=1
type=USER_ACCT msg=audit(1595368441.355:44201): pid=80500 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1595368441.355:44202): pid=80500 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1595368441.355:44203): pid=80500 uid=0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=4707 res=1
type=USER_START msg=audit(1595368441.355:44204): pid=80500 uid=0 auid=1002 ses=4707 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1595368441.355:44205): pid=80499 uid=0 auid=1002 ses=4706 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1595368441.355:44206): pid=80500 uid=0 auid=1002 ses=4707 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1595368441.385:44207): pid=80499 uid=0 auid=1002 ses=4706 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1595368444.031:44208): pid=80499 uid=0 auid=1002 ses=4706 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1595368444.034:44209): pid=80499 uid=0 auid=1002 ses=4706 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1595368448.024:44210): pid=80500 uid=0 auid=1002 ses=4707 msg='op=PAM:setcred grantors=pam_env,pam_hulk,pam_unix acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1595368448.027:44211): pid=80500 uid=0 auid=1002 ses=4707 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mecgroup" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'